Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File:                     CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier:          T25z0XrGm3UJ2T8tA7IsPCe+FwpXSyQXP0ePDEfkDfc=
Subject key identifier:   10:81:A2:95:33:61:56:6F:DB:24:02:4F:B2:63:8A:0B:54:C3:0E:0F
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer:       /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial:       019EBE11106006EAB8FBF13DA322DBDFB2B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number:          054A
Signing time:             Fri 12 Jun 2026 23:00:49 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:49 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:49 +0000
Files and hashes:         1: 1-oF-we2cmHSHaID5tDY175ejYyc.roa (hash: dJ5RifzmXnjb10Iv95+voBaC+89de9KOSKWwWpiVAmQ=)
                          2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: kpwDQ7pl9Pf2zub0iZd8sgF8+OP1W7/BeAoeiiousJo=)
                          3: tSi7rgFlmfh1P4HXVwQwVPU47ak.roa (hash: a+hi0S0VRR6DQeW+YfoSxvunfpCb33mxDCeififJ5+A=)
                          4: wOsJVEziUaOvFA1iNE3ry9kPQfE.roa (hash: FAa7Ewjlb7OE+5koslUqaQRcv1OSsbCB7gnK+sa/8FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:10:60:06:ea:b8:fb:f1:3d:a3:22:db:df:b2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
        Validity
            Not Before: Jun 12 23:00:49 2026 GMT
            Not After : Jun 13 23:00:49 2026 GMT
        Subject: CN=1081a2953361566fdb24024fb2638a0b54c30e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:60:f3:2f:23:f9:3f:b0:53:92:26:a1:79:
                    69:e2:20:f9:ff:ca:44:4d:bc:be:71:70:ca:64:c6:
                    5f:8a:1b:45:4a:1b:9d:2a:2b:1b:31:95:cf:a0:6e:
                    35:39:87:3c:79:dc:1e:2a:69:14:26:27:b2:a5:0f:
                    0c:23:38:ab:e6:39:93:d1:0c:28:dc:77:96:1e:69:
                    ea:3e:26:4e:67:0d:a8:f1:63:d8:f7:4c:25:ff:15:
                    6e:99:be:30:77:76:07:4d:a0:a3:66:4f:e0:0c:fb:
                    2c:75:01:81:56:49:ba:df:f8:7e:5a:a2:ed:93:fc:
                    d3:68:da:da:07:03:41:cb:67:36:56:aa:03:00:6e:
                    4f:dd:1d:55:2e:91:06:92:e1:be:fb:4d:74:88:b1:
                    7a:b5:61:0d:03:3e:d4:61:60:83:6a:b7:e4:db:d7:
                    10:ab:8d:67:1b:a2:01:bf:36:9f:80:7b:39:d7:85:
                    70:a5:b1:1c:f4:84:4c:c5:e1:b3:c9:d8:54:50:c4:
                    88:25:9c:87:da:21:a7:ea:e6:d2:c0:7a:a7:38:17:
                    f5:68:77:29:f4:3e:6f:a1:1f:c9:23:ce:da:e1:ed:
                    84:98:cd:3b:79:00:73:32:8b:06:da:f2:55:6e:2a:
                    42:3e:96:b9:fd:80:e6:66:ab:15:8f:ee:25:d1:0f:
                    35:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:81:A2:95:33:61:56:6F:DB:24:02:4F:B2:63:8A:0B:54:C3:0E:0F
            X509v3 Authority Key Identifier:
                keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:47:90:cf:e3:59:1a:46:3b:c4:70:82:9f:59:bc:d8:aa:97:
         eb:1b:2c:dd:cb:4b:e4:c2:b1:76:69:5d:2e:c7:6c:71:8f:3a:
         25:06:f8:d8:16:14:9e:21:92:95:58:64:f8:49:44:e9:10:61:
         48:ce:b4:51:0d:09:51:9f:7b:16:93:a8:5f:09:56:ae:38:4b:
         c6:17:0e:00:c2:73:4f:16:92:f5:57:83:ee:5d:ea:e9:c8:77:
         75:19:dd:51:a1:d3:c0:35:3e:94:2e:6e:f0:17:0b:93:28:0d:
         3b:e2:b9:91:35:91:77:52:9c:c8:04:a2:09:e9:46:f0:42:dd:
         04:8c:5f:6e:a2:c0:6e:67:ab:2f:f2:7b:10:07:22:d0:df:76:
         3a:80:26:24:1c:bd:91:fc:bf:5b:41:d7:3d:e4:d5:01:56:58:
         67:ed:9e:6f:7e:65:36:eb:cb:c2:98:74:a5:31:28:89:00:65:
         4e:f2:47:e4:17:28:10:9a:c5:ae:8b:40:22:66:4b:c9:1d:be:
         9c:2e:f2:16:d9:aa:6a:49:92:ba:5f:4f:31:b4:aa:46:01:bc:
         bb:58:98:28:70:ca:a8:e0:d3:78:8d:ff:5a:7c:70:6a:55:68:
         21:bd:9a:88:0a:05:23:80:63:1b:a3:7a:d1:28:3a:46:0e:6e:
         90:b1:f9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:22 2026 by rpki-client